Privacy Policy

Last updated: May 27, 2026

1. What Postgate Is

Postgate is a social media cross-posting gateway. It connects your social media accounts via OAuth and provides an API to publish content across platforms. Postgate is operated by Enraio.

2. Data We Collect

We collect only what is necessary to provide the service:

OAuth tokens — Access and refresh tokens from platforms you connect (Facebook, Instagram, YouTube, LinkedIn, Twitter/X, Threads). These are encrypted at rest using AES-256-GCM.
Account metadata — Your platform user ID, display name, and connected platform type.
Post log — A record of posts made through Postgate: timestamp, platform, status (success/failure), and platform post ID. We do not store the content of your posts.
Email address — If you create a Postgate account (SaaS tier).

3. Data We Do Not Collect

We do not read your social media feeds, DMs, or followers lists.
We do not store your platform passwords. OAuth means we never see them.
We do not sell, share, or transfer your data to third parties.
We do not use your data for advertising or analytics profiling.

4. How We Use Your Data

OAuth tokens are used solely to publish content on your behalf when you make an API request.
Tokens are automatically refreshed to maintain your connection. No manual action is needed.
Post logs are used to show you your publishing history and for debugging failed posts.

5. Data Storage & Security

All OAuth tokens are encrypted at rest using AES-256-GCM encryption.
The encryption key is stored separately from the database.
Self-hosted users retain full control of their data on their own infrastructure.
SaaS-hosted data is stored on secure servers with encrypted disks.

6. Third-Party Services

Postgate connects to the following third-party APIs on your behalf:

Meta (Facebook, Instagram, Threads) — Meta Privacy Policy
Google (YouTube) — Google Privacy Policy
LinkedIn — LinkedIn Privacy Policy
X (Twitter) — X Privacy Policy

7. Data Deletion

You can disconnect any platform account at any time from the Postgate dashboard. Disconnecting revokes the token and deletes it from our database. You can also request complete account deletion by contacting us.

8. Self-Hosted Users

If you self-host Postgate, all data stays on your machine. We have no access to your database, tokens, or posts. This privacy policy applies only to the hosted SaaS version at postgate.enraio.com.

9. Changes

We may update this policy. Changes will be posted on this page with an updated date. Continued use of the service constitutes acceptance.

10. Contact

Questions about this policy: privacy@enraio.com